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Abstract:  The  concept  of  network-centric  warfare  (NCW)  is  an  evolving  construct  that 
has  altered  the  military  organizational  landscapes.  In  the  asymmetric  information 
domains,  there  are  few  studies  that  actually  relate  the  daily  agitations  of  each  of  the 
command  centers  to  the  vulnerability  of  the  entire  C2  structure.  In  addition,  there  are  no 
existing  studies  that  use  daily  events  and  incidents  to  understand  the  vulnerabilities  of 
each  organizational  structure.  This  paper  reports  on  the  use  of  network  and  organizational 
theories  to  derive  vulnerabilities  of  organizational  structures  based  on  probabilistic  events 
on  each  C2  center.  Vulnerability  is  calculated  as  a  function  of  information  surprisal.  The 
results  of  an  empirical  study  comparing  organizational  structure  designs  in  terms  of 
vulnerabilities  are  presented. 


INTRODUCTION 

An  organization  is  a  group  of  people  intentionally  brought  together  to  accomplish 
an  overall,  common  goal  or  a  set  of  goals.  Organizations  can  range  in  size  from  two  to 
tens  of  thousands.  One  of  the  common  ways  to  look  at  organizations  is  social  systems 
(McNamara,  2005).  Self-organizing  networks  show  signs  of  high  efficiency,  but  more 
thorough  experimentation  in  larger  numbers  is  needed  to  valid  the  results  (ELICIT, 
2006). 

Command  and  Control  in  the  2 1  st  century  is  characterized  by  a  design 
transformation  from  a  hierarchical  industrial  age  C2  to  networked  information  age  C2 
concepts.  While  a  requisite  information  infrastructure  is  widely  recognized  as  enabler  of 
networked  C2,  the  use  of  information  on  events  that  perturb  the  overall  system 
performance  has  been  understudied1.  The  authors  argue  that  knowledge  of  how  and  to 
what  degree  daily  events  in  Iraq  and  Afghanistan  contribute  to  C2  network  vulnerability 
is  indispensable  information  for  designing  future  C2  networks.  Here  is  a  simple  rationale 
to  this  observation:  A  typical  battlefield  system  is  populated  by  at  least  two  command 
and  control  (C2)  centers.  Each  center  is  responsible  for  conducting  the  affairs  of  the 
designated  area  of  interest.  For  the  C2  centers  to  interoperate,  information  exchange  is 


1  Carley,  K.M  &  Lin,  Z.  (1997)  A  theoretical  study  of  organizational  performance  under  information 
distortion.  Management  Science,  43(7),  976-997. 
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Public  reporting  burden  for  the  collection  of  information  is  estimated  to  average  1  hour  per  response,  including  the  time  for  reviewing  instructions,  searching  existing  data  sources,  gathering  and 
maintaining  the  data  needed,  and  completing  and  reviewing  the  collection  of  information.  Send  comments  regarding  this  burden  estimate  or  any  other  aspect  of  this  collection  of  information, 
including  suggestions  for  reducing  this  burden,  to  Washington  Headquarters  Services,  Directorate  for  Information  Operations  and  Reports,  1215  Jefferson  Davis  Highway,  Suite  1204,  Arlington 
VA  22202-4302.  Respondents  should  be  aware  that  notwithstanding  any  other  provision  of  law,  no  person  shall  be  subject  to  a  penalty  for  failing  to  comply  with  a  collection  of  information  if  it 
does  not  display  a  currently  valid  OMB  control  number. 
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necessary.  Interoperability  implies  the  existence  of  diverse  systems.  Each  C2  center  is 
vulnerable  to  enemy  attack  in  various  dimensions.  For  this  reason,  there  are  many 
possibilities  of  information  and  communication  loss.  This  is  often  measured  in  terms  of 
entropy.2  Another  measure  related  to  entropy  is  self  information  which  has  the  content  of 
information  associated  with  one  or  many  interacting  system  units.  The  amount  of  self- 
information  contained  in  a  probabilistic  event  depends  only  on  the  probability  of  that 
event.  In  the  current  conflict  in  Iraq,  Bagdad  command,  e.g.,  is  experiencing  myriads  of 
attacks  on  daily  basis — kidnapping,  suicide  bombing,  IED  attacks,  etc.  These  attacks  are 
responsible  for  the  agitation  of  the  C2  centers — generating  elements  of  nervousness, 
increase  or  decrease  in  communication  activities  with  other  C2  centers  in  the  Iraq  sectors 
of  war,  and  so  on.  These  events  occur  probabilistically.  Threat  mitigation  is  then  the  sole 
responsible  of  C2  centers. 

It  is  the  objective  of  the  USA  military  to  make  network-centric  C2  resilient  and 
agile.  But  to  accomplish  this,  many  engineering  metrics  of  performance  must  be 
implanted  into  the  system  during  design  and  operation  phases.  Among  such  metrics  are 
reliability,  dependability,  and  vulnerability.  The  latest  is  the  main  concern  of  this  paper 

C2  NETWORK  VULNERABILITY 

Vulnerability  analysis  of  military  command  and  control  (C2)  systems  is  an 
increasingly  important  field  of  study  as  awareness  grows  of  the  leverage  that  information 
operations  can  provide  in  adversarial  conflicts.  However,  there  are  many  kinds  of 
vulnerability  analyses  and  which  one  is  appropriate  for  a  given  C2  situation  is  not  always 
obvious.  Here,  a  metric  for  C2  network  system  vulnerability  is  developed  based  on 
elemental  adversary  events  that  agitate  individual  C2  nodes  thereby  causing  the  entire  C2 
network  to  increase  in  its  vulnerability,  leading  to  possible  failure.  Figure  1  illustrates  the 
aspects  of  agitation  in  three  different  C2  centers  in  Iraq. 


Figure  1.  An  illustration  of  a  three  node  C2  network  in  Iraq 


2  Shannon,  C.E  &  Weaver,  W.  (1969).  The  mathematical  theory  of  communication.  Urban,  Illinois:  The 
University  of  Illinois  Press. 


Vulnerability  analysis  of  complex  military  systems  with  human  elements  has 
several  levels:  (a)  Determination  of  critical  nodes,  subsystems,  components,  and  links;  (b) 
Evaluation  of  subsystem  or  component  dysfunction  modes;  and  (c)  Evaluation  of  C2 
support  network  reliability  and  dependability.  In  the  physical  (hardware)  communication 
network,  critical  nodes  are  assessed  by  evaluating  the  reliability  of  the  components, 
which  by  itself  is  a  function  of  failure  (due  to  design  faults  or  adversary  incursions) — this 
is  relevant  to  levels  (a)  &  (b)  above.  In  evaluating  reliability  and  dependability,  network 
analysts  are  often  concerned  with  determining  the  “optimum”  conditions  of  the  physical 
components  that  will  yield  the  intended  reliability  or  dependability  factor — including 
intangibles  like  support  systems  such  as  spare  parts  and  maintainability.  When  the  human 
is  considered  a  significant  part  of  the  network,  the  critical  factors  are  the  critical  events  in 
the  battlefield  that  cause  the  human  elements  to  be  equally  vulnerable — inducing  stress, 
fatigue,  and  perhaps  a  failure  to  deploy  the  necessary  communication  and  information 
infrastructures.  We  need  a  new  definition  and  metric  of  vulnerability  to  account  for  these 
critical  events  in  C2  operations.  First,  the  level  of  agitation  of  a  C2  node  in  the  battle 
system  must  be  understood.  Second,  a  method  to  aggregate  the  individual  information  of 
each  node  agitation  must  be  derived.  Currently,  there  is  no  model  that  addresses  this 
problem.  The  reason  is  simply,  most  analysis  is  focused  on  telecommunication  network 
infrastructures3.  In  telecommunication  network,  functionality  measures  are  based  on 
considering  a  number  of  issues  such  as  the  number  of  alternate  paths,  path  lengths,  path 
type,  and  number  of  routers.  From  the  organization  design  perspective,  information  loss 
due  to  attack  on  a  system  is  a  major  indicator  of  vulnerability. 

ORGANIZATIONAL  DESIGNS 

To  illustrate  our  concepts  of  surprisal  as  a  measure  of  vulnerability,  several  basic 
structural  configurations  are  identified:  one  boss,  dual  authority,  simple  hierarchy,  circle, 
and  all-channel  network  (Bolman  &  Deal,  2003).  In  the  one  boss  design  (Figure  2);  one 
person  has  authority  over  others;  leading  to  bureaucracy  and  often  delayed  information 
flows  between  and  across  members  in  the  organization. 


Figure  2.  One  Boss  Design  (Adapted  from  Bolman  &  Deal,  2003) 


3  Gateau,  J.B,  et  al.  (2006).  Hypothesis  testing  of  edge  organizations:  Modeling  the  C2  organization  design 
space.  12th  ICCRTS,  Newport,  RI. 


Figure  3.  Dual  Authority  Design  (Adapted  from  Bolman  &  Deal,  2003) 

The  dual  authority  design  (Figure  3)  creates  a  management  level  below  the  leader 
and  two  individuals  are  given  authority  over  a  specified  area  of  the  team’s  work. 
Information  and  decisions  flow  through  them.  Usually  this  arrangement  is  feasible  when 
a  task  is  divisible.  This  arrangement  allows  for  the  person  in  charge  to  focus  more  effort 
on  strategy  or  relationships  with  higher  authority.  With  the  addition  of  a  new  layer  of 
management,  limitations  occur  with  accessibility  to  communicate  between  lower  levels  to 
the  boss  and  may  eventually  lower  morale  and  performance.  The  additional  layers  also 
make  communication  slower. 


Figure  4.  Simple  Hierarchy  (Adapted  from  Bolman  &  Deal,  2003) 

The  simple  hierarchy  has  a  middle  manager  who  reports  to  the  leader  and 
supervised  and  communicates  with  others  (Figure  4).  This  type  of  structure  is  used  by  the 
government  (e.g.  The  White  House).  It  tends  to  free  the  leader  to  focus  on  mission  and 
external  relations  and  leaves  operational  details  to  the  manager.  This  structure  like  the 
dual  authority  design  limits  access  to  the  top,  but  can  be  more  efficient.  This  can  cause 
conflict  between  the  manager  and  the  person  in  charge  because  the  manager  may  want  to 
take  the  leader’s  position. 


Figure  5.  Circle  Network  Design  (Adapted  from  Bolman  &  Deal,  2003) 

Another  option  is  a  circle  network,  where  information  and  decisions  flow 
sequentially  from  one  group  member  to  another  (Figure  6).  In  this  structure  each  member 
can  modify  what  comes  to  them.  Communication  is  simplified  and  each  member  only  has 
to  deal  with  two  others  which  make  transactions  either  to  manage.  In  this  structure  a 
weak  link  can  undermine  the  entire  team  and  complex  tasks  that  require  more  reciprocity 
can  hinder  team  performance.  Within  this  design  managers  can  come  and  go  without 
seriously  disrupting  the  team’s  ability  to  function  and  members  of  the  team  can  be 
transferred  from  one  team  to  another  with  relative  ease.  A  new  member  can  carry  out 
responsibilities  without  significant  adjustment. 

The  all  channel  or  star  network  (Figure  6)  creates  multiple  connections  so  that 
each  person  can  talk  to  anyone  else.  There  is  free  flow  of  information  and  decisions 
require  interacting  with  multiple  agents  within  the  network.  The  arrangement  usually 
works  well  if  a  task  is  unstructured  or  complicated,  but  it  is  slow  and  inefficient  for  a 
simpler  task.  The  structure  also  works  best  when  team  members  are  willing  to  participate, 
embrace  diversity,  manage  conflict,  have  well  developed  communication  skills,  and  can 
tolerate  ambiguity. 


Figure  6.  All  Channel  (Star)  Network  (Adapted  from  Bolman  &  Deal,  2003) 
their  work,  subordinates  usually  become  frustrated. 


METRICS  FOR  EVALUATING  ORGANIZATIONAL  STRUCTURE 
VULNERABILITY 

The  main  hypothesis  is  that  given  a  set  of  nodal  events  that  agitate  a  system,  the 
overall  vulnerabilities  of  each  of  the  organizational  designs  are  different.  Information 
surprisal  is  used  to  assess  the  vulnerability  of  an  organizational  design  as  a  function  of 
information  loss  in  the  organizational  system.  The  reasoning  is  as  follows:  For  each 
design  topology,  an  expert  probability  estimate  that  assesses  the  likehood  of  command 
agitation  is  given  by  pi,  where  i  is  an  index  for  design  type  (i=l,  2,. . ..).  Each  C2  center  ( 
a  node  in  the  command  network)  is  subject  to  attack,  denoted  by  number  of  events  (NE), 
e.g.,  rocket  attack,  IED  attack,  kidnapping,  sniper  attack,  suicide  bombers,  militia  attacks, 
etc.;  each  attack  has  some  level  of  risk  and  a  weighting  function  that  determine  the  cost 
of  risk.  In  addition,  each  node,  based  on  expert  estimates,  carries  estimated  initial 
probability  of  attack  (p).  Given  this  information,  we  can  determine  the  level  of  node 
agitation  defined  by  the  intensity  vector  qj  defined  in  equation  (1). 
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The  probability  pi  and  the  intensity  qi  for  the  network  is  combined  by  using  a  sigmoid 
threshold  function  to  realize  the  overall  strength  of  the  agitation.  This  is  defined  by 
equation  (2). 

8i  =  (1+  e‘qi*Pi  )_1  (2) 

Vulnerability  as  a  Function  of  Information  Surprisal. 

Shannon  (1948)  defined  the  term  information  entropy  as  a  measure  of  randomness 
or  “disorder”  in  a  system.  It  tells  us  how  much  uncertainty  there  is.  It  was  not  until  1961 
that  Myron  Tribus  used  the  term  surprisal  to  describe  the  “unpredictability  of  a  single 
digit  or  letter”  in  a  word.  This  assertion  by  Tribus  was  however  an  extension  of 
Shannon’s  concept  of  information  event  or  “entropy  event”  measured  by  U  =  -log2P; 
where  U  is  the  measure  of  information  content  and  P  is  the  probability  of  event 
happening.  Tribus  observed  that  the  surprisal  quantity  allows  us  to  measure  how 
surprised  you  are  for  a  given  instant  of  an  event.  Given  a  specific  event  occurrence,  if  all 
messages  are  certain,  i.e.,  P  is  certain  (P=l)  for  all  events,  then  U  =0;  a  condition  that  is 
rare  in  systems  that  produce  and  process  information.  Other  terms  have  been  used,  for 
example,  relative  or  mutual  entropy,  or  mutual  information  (Reza,  1991). 

The  extension  of  surprisal  models  to  organizational  information  management  is 
rare.  However,  the  use  of  entropy,  the  average  surprisal  as  defined  by  Shannon  ( )  are 
ubiquitous.  We  are  interested  in  surprisal  because  of  the  context  of  information  analyses 
that  we  encounter.  These  are  our  assertions: 

a).  The  decision  of  agents  in  an  organization  to  attend  to  messages  of  instructions  depend 
on  the  value  of  the  message  to  the  agent  and  the  processing  complexity  involved. 


Although  certain  organizational  designs  may  coerce  the  agent  or  allow  freedom  to 
choose,  self  perception  of  information  value  can  best  be  described  by  its  surprisal. 

b) .  Given  a  one  boss,  e.g.,  the  subordinate  agent  prefers  to  keep  the  amount  of 
information  or  instruction  from  the  boss  uniform  per  instruction  time  and  context. 

c) .  Given  an  agent  in  the  organization  interacts  with  several  other  agents  through  formal 
relationship,  the  agent  would  prefer  information  of  higher  value  with  less  uncertainty. 

d) .  We  are  concerned  with  the  level  of  uncertainty  or  entropy  in  the  organization;  rather, 
we  seek  to  measure  the  information  content  processed  by  each  node  or  agent  in  the 
network. 

It  is  surmised  that  the  use  of  surprisal  as  a  metric  to  study  organizational  design 
might  help  to  convey  local  based  quantitative  information  on  how  interactions  are 
perceived  by  the  organizational  entities.  For  example,  one  may  desire  to  reduce  the 
surprisal  of  information  loss  between  at  least  two  entities  which  may  be  caused  by  many 
factors,  such  as  equivocation,  information  ambiguity,  or  modality  of  information 
conveyance. 

Network  Vulnerability  Score 

Algorithms  based  on  information  surprisal  and  event  probabilities  are  derived  for  each 
design  topology.  For  each  topology,  a  relationship  table  that  contains  information  on  the 
strength  of  authority  or  command  directives  is  defined  by  by  (where  j  reports  to  i).  For 
example  in  the  one  boss  structure  in  the  figure  below,  Table  1  is  used. 

CT)  al=.638 

In  the  figure  to  the  right,  we  assume  the  values  of  o.5 
a;  (i=l,..4).  Node  al  is  the  parent  node,  and  A- 

nodes  2,3,4  receive  directives  from  node  al.  Here, 
node  2  receives  directives  from  al,  50%  of  the  ~=  ~ 

time,  a2,  80%,  and  a4,  80%.  a  ' 


Table  1.  Sample  command  relationship  strengths 
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For  the  one  boss  design,  assume  by  (i^  j),  we  scale  all  the  influence  or  authority  scores 
such  that  their  sum  is  1  (in  probability  sense).  Then,  we  calculate  the  edge  weights  in  the 
network  by 

eij  =  a;  *  aj  *  b*ij  (3) 

where  Cy  is  the  edge  weight  between  parent  i  and  child  j;  b*ij  is  scaled  probabilistic 
influence.  We  then  calculate  the  average  network  weight,  W  by 

N  n(i ) 

w  =  (1  /N)YY,eij 

i= 1  j= 2 


a3=.694  a4=.71 


(4) 


N  =  number  of  nodes  in  the  network,  n  (i)  is  the  number  of  children  of  node  i,  the 
information  surprisal  score,  h  for  design  type  k  is  defined  by 

hk=  log2(j^)  (5) 

In  the  dual  authority  design,  we  have  to  account  for  the  percentage  of  authority 
retained  by  the  boss.  We  shall  use  the  figure  below  to  illustrate  this. 


Consider  the  influence  b25  =  0.9;  the  extra  10%  authority  is  the  influence  of  command  of 
node  1  on  node  5.  Thus,  the  we  need  to  scale  the  effective  influence  of  node  1  on  node  2 
by  taking  into  consideration  the  10%  of  influence  of  node  1  on  node  5. This  is  calculated 
by  bi2  =  (1+  (l-b25))*bi2  =  (1+  (l-0.9))*0.5  =  0.55.  This  procedure  is  repeated  for  all  the 
edges  to  obtain  the  middle  authority  weight  vector  m  =  (bi2,  bn,  bn)  =  (0.55,  1.04, 

0.8). The  next  step  is  to  scale  m  vector  to  sum  to  1  in  probability  sense.  This  gives  m*  = 
(0.23,  0.44,  0.33).We  apply  the  same  logic  as  in  the  one  boss  design  to  calculate  the 
extended  path  weight,  and  the  average  network  weight  and  its  surprisal  using  equations  3- 
5.  For  example  e^s  =  ai*m*i2*a2*b25*a5  =(0.638*0.23*0.612*0.9*0.8)  =  0.0647;  W  = 
0.076;  I12  =  3.718.  We  apply  the  same  logic  in  design  2  above  to  a  simple  hierarchy 
design  in  Figure  4.  The  algorithm  for  circle  network  design  (Figure  5)  and  all  channel  star 
design  (Figure  6)  are  similar  and  use  a  different  logic.  Exhibits  1  and  2  below  are  used  to 
illustrate  the  calculations.  In  the  circle  network,  each  edge  score  is  calculated  by  equation 


6. 


Exhibit  2  Circle  network 


Exhibit  3.  Channel  star 


e;j=  ai*aj  (6) 

Equations  4  and  5  are  applied  to  calculate  the  surprisal  of  the  network;  the  surprisal  is 
determined  by  the  different  between  the  surprisal  from  interaction  and  the  surprisal  from 
node  agitations;  i.e., 

h  =  he-hn  (7) 

where  he  is  the  surprisal  due  to  interaction  effect  and  hn  is  the  surprisal  due  to  node 
agitations.  In  Exhibit  3,  the  channel  star  design  has  no  central  command.  Here  we  create  a 
symmetric  confusion  (a  sort  of  energy  dissipation)  matrix  and  calculate  the  average 
weighted  event  probability  whose  value  is  use  to  calculate  he.  The  elements  of  the  matrix 
is  calculated  from  equation  6  above  (except  i  ^  j;  in  which  case,  we  set  the  value  to  0  in 
the  matrix).  Table  2  show  sample  matrix  values  and  the  average  row  values. 


Table  2.  Samp 


e  interaction  matrix  for  channel  star  design. 


1 

2 

3 

4 

5 

6 

7 

Row 

average 

1 

0 

0.0.389 

0.443 

0.453 

0.51 

0.319 

0.415 

0.4215 

2 

0.389 

0 

0.425 

0.435 

0.4896 

0.306 

0.3978 

0.407 

3 

0.443 

0.425 

0 

0.493 

0.555 

0.347 

0.451 

0.4525 

4 

0.453 

0.435 

0.493 

0 

0.568 

0.355 

0.4615 

0.4609 

5 

0.51 

0.4896 

0.555 

0.568 

0 

0.4 

0.52 

0.5071 

6 

0.319 

0.306 

0347 

0.355 

0.4 

0 

0.325 

0.342 

7 

0.415 

0.3978 

0.451 

0.4615 

0.52 

0.325 

0 

0.4284 

Average 

0.4313 

SAMPLE  SIMULATION  RESULTS 

We  have  implemented  the  computation  as  an  interactive  program,  allowing  the 
user  to  choose  the  number  of  nodes  in  the  network  and  the  type  of  organizational 
structure  desired.  Exhibit  4-  shows  sample  input  date  for  a  network  with  7  nodes, 
including  the  relevant  information  on  the  node. 
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Exhibit  4.  Sample  input  screen 


Sample  simulation  results  for  each  design  topology  are  shown  in  Exhibits  5-8 

below. 


Exhibit  5.  One  boss  design  (h  =2.857)  Dual  authority  design  (h  =1.94) 

Based  primarily  on  the  input  used  for  this  validation  analysis,  the  one  boss  design 
tends  to  have  higher  information  surprisal  (a  value  of  2.86).  This  may  be  attributed  to  the 
rigid  authority  concentrated  on  one  command  node.  Bothe  the  dual  authority  and  simple 
hierarchy  design  did  not  show  any  significant  different  (with  values  of  1.94  and  1.91, 
respectively).  All  channel  design  showed  a  marginal  gain  above  circle  network  design. 


Exhibit  6.  Simple  hierarchy  (h  =1.91) 


Exhibit  7. Circle  network  (h  =0.6418) 


Exhibit  8.  All  channel  design  (h  =0.609) 


However,  in  all  cases,  both  circle  network  and  all  channel  designs  outperform  the 
classical  hierarchical  design.  This  result  confirms  the  premise  of  network-centric  gains  in 
information  distribution  advocated  by  Alberts,  Garska  and  Stein  (1999). 

CONCLUSION 

It  is  believed  here  that  tactical  events  in  the  battlefield  network  moderate  the 
behaviors  of  the  network  in  time  and  space.  It  is  thus  important  to  understand  the  level  of 
agitation  and  vulnerability  caused  by  such  events.  Our  results  are  promising  and  can  be 
extended  to  dynamic  network  risk  assessment,  latent  semantic  network  evaluation,  and 
reliability  of  network-centric  C2  based  on  tactical  events.  This  nascent  model  has  some 
short  comings  that  need  further  research.  These  are:  (1)  We  need  to  improve  on  the  user 
interface;  (2)  We  need  to  add  dynamic  database  to  capture  time-based  input  events;  (3) 
We  need  to  make  the  network  simulation  dynamic  based  on  spatio-temporal  events — that 
is  learn  its  behaviors  from  dynamic  input  sourced  from  multiple  databases;  and  (4) 
Investigate  the  use  of  robust  analytical  models,  such  as  chaos  theory,  complexity  theory, 
information  theory,  or  neural  network  model  to  control  the  adaptive  behavior  of  the 
network  and  its  node  dynamics.  The  generality  of  our  modeling  effort  is  illustrated  with 
multi-node  information  communication  network  in  Exhibit  9. 


Exhibit  9.  Sample  result  from  multi-node  network  vulnerability 
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A  Network  View  of  Organizations 
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Some  Characteristics  of  Network-centric  Organizations 


*  Focused  on  expanding  number  of  people  /  organizations 
reached 

*  Focused  on  expanding  capacity  of  network  to  perform 

*  More  attention  paid  to  information  sharing 

*  Values  and  rewards  sharing  of  information 

*  Values  social  contact  between  staffs  of  partner 
organizations 

*  Values  coordinated  action  over  "leadership" 

*  Distributed  power  structure 

*  Power  is  pushed  to  the  edge  of  the  network 

*  Leverages  and  shares  resources  with  partners 

*  Values  cooperation,  collaboration,  redundancy  and 
interaction. 
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A  Brief  on  Network-Centric  Organizations 


Technology  has  driving  human  social  organizations  to 
the  information  age: 


•The  World  has  become  a  network  of  networks,  filled 
with  actors  who  behave  in  increasingly  interconnected 
ways  and  with  wide-reaching  and  rapid  consequences. 

•Complexity  has  evolved  as  a  result  of  complicated 
seamless  interactions. 
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A  Brief  on  Network-Centric  Organizations 
•Information  is  the  weapon  for  competitive  advantage 
•Universal  need-to-share 
•Changes  in  organizational  structure 
•Adaptation  to  environmental  changes 
•Creates  vulnerabilities: 

•Different  scales  and  layers  of  organizational  design 
•Speed  of  information  flow 
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ArULI 


CPA  NORTH 


Daily  Events: 

IED,  Suicide  bombing 
Sniper  attacks 


Daily  Events: 
IED,  Kidnapping 
VIED 


CPA  SOUTH  CENTRAL 


p  Nl»lrty«h 

|Li  Oil 

■  At 

■  AX  ZubJyr 


Daily  Events: 
Ethnic  violence. 
Rocket  attacks 


In  the  Military  Domain,  C2  Network 
Vulnerability  is  a  C 


1 .  Physical  attacks  on  the  command  nodes;  e.g.,  daily  attack  in 
tactical  C2  elements  in  Iraq  regions — leading  to  node 
agitations  and  instabilities. 

2.  Cyber  attacks  on  information  technology  nodes: 

(a)  Network  failures  and  insecurities;  (b)  malicious  “viruses” 

3.  Informational  attacks  through  insertion  of  press  propaganda. 


The  Center  for  Human-Machine 


NORTH  CAROLINA  A&T  STATE  UNIVERSIT\ 


In  the  Military  Domain,  C2  Network 
Vulnerability  is  a  Concern 

Current  measures  of  network  vulnerability  consider: 

1.  hardware  failures  and  reliability  parameters. 

2.  dependability  measures  which  assess  availability 
and  ease  of  maintenance 

3.  anecdotal  use  of  subjective  trust  measures 


tn 


Must  be  considered: 

1 .  Events  that  may  likely  destabilize  the  C2  nodes  and 
elements. 

2.  Organization  design  and  information  flow  structure. 

3.  Latent  events  (fog  of  war)  such  as  deceptions  and  “worms” 
that  crawl  into  the  cyber  network. 
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Selected  Types  of  Organization 


Standard  Hierarchy 


Chain  Network 


Hub  &  Spoke 


All-Channel 


Dual  authority 


Considered  for  the 
study 


Bolman  &  Deal,  2003 
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Evaluation  Metric  for  Organization  Design 
Comparison 


Assumptions: 


1.  An  organization  is  driven  by  communication  and 

information  flows. 

2.  Information  can  be  lost,  degraded,  misplaced,  ‘ 

damaged’,  etc. 

3.  The  “boss”  defines  the  context  of  the  organization 

‘self-  informaton’  to  the  subordinates. 

4.  Surprisal  or  self  entropy  can  be  used  to  measure 

information  lost  in  the  system. 

5.  Higher  entropy  measure  indicates  the  likehood  of 

organization  network  vulnerability. 
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Vulnerability  as  a  Function  of  Information  Surprisal. 

Shannon  (1948)  defined  the  term  information  entropy 
as  a  measure  of  randomness  or  “disorder”  in  a 
system. 

It  tells  us  how  much  uncertainty  there  is. 

In  1961  Myron  Tribus  used  the  term  surprisal  to 
describe  the  “unpredictability  of  a  single  digit  or 
letter”  in  a  word. 

This  assertion  by  Tribus  was  however  an  extension  of 
Shannon’s  concept  of  information  event  or 
“entropy  event”  measured  by 
U  =  -log2P;  where  U  is  the  measure  of  information 
content  and  P  is  the  probability  of  event  happening. 

Given  a  specific  event  occurrence,  if  all  messages  are 
certain,  i.e.,  P  is  certain  (P=1)  for  all  events,  then  U  =0 
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Vulnerability  as  a  Function  of  Information  Surprisal 


These  are  our  assertions: 

a).  The  decision  of  agents  in  an  organization  to  attend  to 
messages  of  instructions  depend  on  the  value  of  the 
message  to  the  agent  and  the  processing  complexity 
involved.  Although  certain  organizational  designs  may 
coerce  the  agent  or  allow  freedom  to  choose,  self 
perception  of  information  value  can  best  be  described  by 
its  surprisal. 


b).  Given  a  one  boss,  e.g.,  the  subordinate  agent  prefers 
to  keep  the  amount  of  information  or  instruction  from  the 
boss  uniform  per  instruction  time  and  context. 
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Vulnerability  as  a  Function  of  Information  Surprisal. 

These  are  our  assertions: 

c) .  Given  that  an  agent  in  the  organization  interacts  with 
several  other  agents  through  formal  relationship,  the 
agent  would  prefer  information  of  higher  value  with  less 
uncertainty. 

d) .  We  are  not  concerned  with  the  level  of  uncertainty  or 
entropy  in  the  organization;  rather,  we  seek  to  measure 
the  information  content  processed  by  each  node  or  agent 
in  the  network. 
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Evaluation  Metric  for  Organization  Design 
Comparison 


Given  this  information,  we  can  determine  the  level 
of  node  agitation  defined  by  the  intensity  vector  q; 
defined  in  equation  (1). 


<7, 


NE  (/'  ) 

Z  w>]  R.J 


J  =  1 

NE  (i) 


y  w 


ij 


The  probability  Pj  and  the  intensity  q,  for  the  network  is 
combined  by  using  a  sigmoid  threshold  function  to  realize  the 
overall  strength  of  the  agitation.  This  is  defined  by  equation  (2). 
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Evaluation  Metric  for  Organization  Design 
Comparison 


One  Boss  Analysis 


We  scale  all  the  influence  or 
authority  scores  such  that 
their  sum  =1  (in  probability 
sense).  Then,  we  calculate 
the  edge  weights  in  the 
network  by 


e;;  =  a  *  a  *  b* 


(3) 

where  e^  is  the  edge  weight 
between  parent  i  and  child  j; 
b*yis  scaled  probabilistic 
influence.  We  then  calculate 
the  average  network  weight, 
W  by 

W=  (VN)^^ey 

f=l  7=2 


N  n(i ) 
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Evaluation  Metric  for  Organization  Design 
Comparison 

Dual  Authority 


•Needs  to  account  for 
percentage  of  authority 
retained  by  immediate 
boss.  E.g.,  in  the  diagram, 
1 0%  of  node  2  control  of 
node  5  is  maintained  by 
the  main  boss  at  node  1 . 
the  influence  of  node  1  to 
2  becomes  by 
•bi2  =  (1+  (1“b25))  b12  = 
(1+  (1-0.9))*0.5  =  0.55 
•Apply  same  logic  as  one 
boss  case  to  calculate  the 
path  weight 


This  procedure  is  repeated  for  all  the 
edges  to  obtain  the  middle  authority  weight 
vector  m  =  (b12,  b13,  b14)  =  (0.55,  1 .04,  0.8). 
m*  =  (0.23,  0.44,  0.33:  scaled  to  1. 


Extended  path  weight,  and  the 
average  network  weight  and  surprisal 
using  equations  3-5.  For  example 
e125  =  a1*m*12*a2*b25*a5 
=(0.638*0.23*0.612*0.9*0.8)  =  0.0647; 
W  =  0.076;  h2  =  3.718. 
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Evaluation  Metric  for  Organization  Design 
Comparison 


Circle  Network 

•Calculate  the  edge 
relationship:  e^  =  a*aj 

Calculate  the  surprisal  of  the 
entire  network  due  to 
interactions  between  nodes,  he 
•Calculate  the  surprisal  of  the 
network  due  to  node  authority, 


The  design  surprisal  score  is  h 


n 
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Evaluation  Metric  for  Organization  Design 
Comparison 
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Channel  star  network 
•Same  method  as  circle  Network  design, 
except  in  eij,  i  ^  j;  in  which  case,  we  set  the 
value  to  0  in  the  matrix). 


0.638 


0.612' 


0.694 


0.71 


fl 

E  « 

=  .2 

x  v 

«.  3 

£  to 


NORTH  CAROLINA  A&T  STATE  UNIVERSIT\ 


Computational  Implementation 

Visual  Basic  and  Excel  Spreadsheet 
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Computational  Evaluation 


Simple  hierarchy  design 
(h  =1.91) 


Circle  Network  design  (h  =  0.6418) 
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•It  is  important  to  understand  the  level  of  agitation 
and  vulnerability  caused  by  probabilistic  events  in 
the  network-centric  organizations. 

•  Our  results  are  promising;  and  can  be  extended 
to  dynamic  network  risk  assessment,  latent 
semantic  network  evaluation,  and  reliability  of 
network-centric  C2  based  on  tactical  events 
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Summary  and  Results 
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Summary  and  Results 


Observations: 


This  nascent  model  has  some  short  comings  that  need 
further  research. 

(1) We  need  to  improve  on  the  user  interface; 

(2)  We  need  to  add  dynamic  databases  to  capture  time- 
based  input  events; 

(3)  We  need  to  make  the  network  simulation  dynamic  based 
on  spatio-temporal  events — that  is  learn  its  behaviors  from 
dynamic  input  sourced  from  multiple  databases;  and 

(4)  Investigate  the  use  of  robust  analytical  models,  such  as 
chaos  theory,  complexity  theory,  information  theory,  or 
neural  network  model  to  control  the  adaptive  behaviors  of 
the  network  and  its  node  dynamics. 
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